FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-04-24 03:12:49 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML IDDescription
70d0d2ec-cb62-11ed-956f-7054d21a9e2apy39-rencode -- infinite loop that could lead to Denial of Service

NIST reports:

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU and memory.


Discovery 2021-09-09
Entry 2023-03-25
Modified 2023-03-26
py39-rencode
le 1.0.6_1

CVE-2021-40839
https://osv.dev/vulnerability/PYSEC-2021-345
https://osv.dev/vulnerability/GHSA-gh8j-2pgf-x458